Local Privilege Escalation Vulnerability in Quanos SCHEMA ST4 by Quanos

CVE-2026-11858

What is CVE-2026-11858?

Quanos SCHEMA ST4 features a vulnerability within its Client Update Service that allows local authenticated users to elevate their privileges. This service operates with SYSTEM-level permissions and exposes a .NET Remoting interface through a named pipe, lacking adequate access controls. Malicious users with low privileges can exploit this vulnerability to connect to the exposed interface, executing privileged update methods like Update(). This unauthorized access could lead to arbitrary file manipulation, enabling local privilege escalation.

References